Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1w3R25bK98Y7r3ordn06Rlv5PBk.roa
File: 1w3R25bK98Y7r3ordn06Rlv5PBk.roa (raw, json)
Hash identifier: r9Pjwe5TURWL1y1ikt8QQaWmpGXNH14WRvbm5GQIrmk=
Subject key identifier: D7:0D:D1:DB:96:CA:F7:C6:3B:AF:7A:2B:76:7D:3A:46:5B:F9:3C:19
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019C0ADE0D274258420AFD5820E491FF3F1F
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1w3R25bK98Y7r3ordn06Rlv5PBk.roa
Signing time: Thu 29 Jan 2026 17:47:30 +0000
ROA not before: Thu 29 Jan 2026 17:47:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 94.184.9.0/24 maxlen: 24
94.184.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0a:de:0d:27:42:58:42:0a:fd:58:20:e4:91:ff:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 29 17:47:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d70dd1db96caf7c63baf7a2b767d3a465bf93c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:ce:07:0b:0d:78:1b:4c:36:e9:b0:dc:aa:
0a:90:12:5b:94:bd:bd:de:86:06:44:90:46:41:10:
d5:72:39:02:52:13:b7:79:48:4c:63:5d:c0:1c:71:
77:11:92:e7:4f:c8:66:74:6e:e9:92:35:6e:bd:30:
de:3b:11:e6:13:7c:60:ec:f6:c5:a3:94:14:6b:f6:
35:a5:c6:fd:f6:ab:83:8a:db:3a:fe:a1:24:26:35:
9a:58:d6:e9:ca:ca:44:fd:e0:81:91:9e:db:f5:ae:
4b:d6:9b:82:20:2d:76:ec:f1:76:58:c7:3a:57:50:
06:79:07:34:f0:26:1e:c1:9a:4f:37:07:0e:ee:fc:
ce:76:dd:f7:ac:c0:84:df:0c:30:03:f5:b4:40:a5:
3c:f6:c0:70:55:ab:53:b8:d8:59:96:dd:b5:6d:4a:
11:24:30:87:29:13:51:ca:56:7c:d1:23:03:67:55:
38:44:c3:06:f2:b3:ad:b6:7d:34:1a:76:d2:1d:c7:
5f:7f:a8:82:6d:8d:1a:2f:5d:81:2d:a7:4d:80:9d:
b3:22:a1:44:f1:08:f7:90:19:ca:bd:fd:70:2e:99:
b4:a4:01:27:12:51:1e:10:4b:e3:6d:07:76:a3:2b:
99:7d:31:fb:06:cb:76:2d:76:a5:f1:d0:af:0a:f8:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:D1:DB:96:CA:F7:C6:3B:AF:7A:2B:76:7D:3A:46:5B:F9:3C:19
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1w3R25bK98Y7r3ordn06Rlv5PBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.9.0/24
94.184.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f5:8a:89:b6:96:a2:4e:82:75:6c:32:ab:e3:1b:46:bb:79:
12:29:3c:20:1b:95:52:d3:6f:fd:ca:82:fa:31:4e:11:fe:d7:
4a:a6:fd:a6:f5:bb:ad:5e:99:98:e2:c8:70:15:50:cc:3f:fc:
40:c4:bc:75:00:5c:8e:2c:db:39:b7:bd:ab:98:c1:b2:c8:8b:
e9:3f:9a:9a:00:d3:49:39:53:78:1e:87:42:a7:73:6c:18:44:
29:b6:1a:2e:6c:51:47:87:41:6a:25:e0:9c:62:28:8c:0f:bd:
22:7e:25:1e:d6:a3:62:8d:dd:86:e8:08:f1:30:b8:f6:0c:6a:
0f:ef:4e:ba:ea:dd:5a:20:17:cc:2d:06:50:18:08:97:a8:e4:
47:c7:4c:ba:76:cc:69:e6:d1:5c:4d:23:73:f5:61:62:9e:4b:
e5:97:91:d5:5c:3c:49:21:11:c3:43:3b:b9:2d:e3:08:11:ea:
67:58:76:97:4f:8a:3d:a9:fc:7c:e3:07:bf:e0:c5:3a:fb:8b:
f8:75:d7:f6:23:62:11:5d:b1:a8:a2:5e:8d:d4:c3:ac:1b:ec:
40:fa:7e:60:56:4c:d3:8c:4f:a4:cd:fd:50:52:09:d7:c5:d3:
88:23:0e:f9:8a:19:d1:db:70:a8:f1:a7:26:3a:5d:08:f6:59:
c3:e8:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:40 2026 by rpki-client